Hello,
I have an issue with our current WSUS / ConfigMgr SUP installation. Due to security restrictions we need a WSUS Upstream Server for our high security area. We are not allowed to have direct or indirect (proxy) internet connection there so we are using two
WSUS Server. One of the is in our DMZ, he has direct internet access and provides updates for our wsus in our HSA.
In our HSA there is also our ConfigMgr Environment. It's one primary site with a local SUP / WSUS installation which is connected to the second WSUS in HSA.
DMZ is our primary Domain Forrest
HSA is a separate Domain Forrest
Coming to the issue. Both WSUS servers are explicitly used by the SUP to get the updates. I turned on reporting of all WSUS events to be able to get the information about needed updates sent to the Upstream WSUS servers so that I can only approve the updates
which are truly needed. Unluckily the WSUS from the ConfigMgr SUP is not reporting them to our upstream WSUS. I get the information that for example in the SUP are 100 updates needed by computers but not which updates exactly.
Is there any way to either report that information from ConfigMgr SUP to WSUS to get all needed updates down in our HSA without simply approving and downloading all updates?
We are using Windows Server 2012 R2 on all systems and ConfigMgr 2012 R2 SP1.